The control is necessary in central points of a network, such as gateway screens, sluices, servers. By the machines that are carrying out such functions it is meaningful to use tv3.
The information on passing IP-packets is removed by connected plugin-modules (TRACERs) and-or external processes (SOURCEs) and processed on the basis of the filter established by the user. The statistics of corresponding filter rules to that requirements corresponds the next IP-packet, might change.
The mechanism of work of packets sources predicts different ways of trace (tracer/source) that can be supplemented in future. Connected modules (tracer) are passive functions that are periodically caused tv3 for reception of the information on the following receiveed packet and, at occurrence of a new packet, its data enter the name in turn of processing. External sources (source) - the receiveive processes independently placing data into tv3 processing-queue.
From queues IP-packet information gets in the filter. The filter - is a treelike structure of setting parameters of definite IP-packets, each unit and a list of this structure sets parameters of definite packets and accumulates statistics. Data of the new packet processed through the filter and the "worked" rules enter the name in a cache for fast processing of similar packets in future.
Filter rules are set by the user or external process through the WEB-interface or PIPE using an XML-file.